UpHeron
All vulnerabilities

Servers and applications

CVE-2024-3383

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Severity
Critical 9.1
Published
10 Apr 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.1.11, 10.2.5, 11.0.3
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 10.1.0 before 10.1.11
  • From 10.2.0 before 10.2.5
  • From 11.0.0 before 11.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-3383
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-3383